North Korea ATM Hack
The US Cybersecurity and Infrastructure Security Agency (CISA) published a long and technical alert describing a North Korea hacking scheme against ATMs in a bunch of countries worldwide:
This joint advisory is the result of analytic efforts among the Cybersecurity and Infrastructure Security Agency (CISA), the Department of the Treasury (Treasury), the Federal Bureau of Investigation (FBI) and U.S. Cyber Command (USCYBERCOM). Working with U.S. government partners, CISA, Treasury, FBI, and USCYBERCOM identified malware and indicators of compromise (IOCs) used by the North Korean government in an automated teller machine (ATM) cash-out scheme—referred to by the U.S. Government as “FASTCash 2.0: North Korea’s BeagleBoyz Robbing Banks.”
The level of detail is impressive, as seems to be common in CISA’s alerts and analysis reports.
Subscribe to comments on this entry
David Rudling • September 1, 2020 11:13 AM
@Bruce
Thank you for posting the link to the alert which makes interesting and educational reading. Your blog does a great job of making this stuff available to a wider audience.
Others may be more interested on the Who and Why aspects but to my mind more enduring and important are the What and How information relating to these tools. Who and Why can be transient but knowledge of the nature of the threat is fundamental to security.